Your message dated Sun, 6 Sep 2009 20:54:33 -0600 (MDT)
with message-id <[email protected]>
and subject line not a bug
has caused the Debian Bug report #545413,
regarding sudo fails with "sudo: setreuid(ROOT_UID, user_uid): Operation not
permitted" for ldap users
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
545413: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=545413
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: sudo
Version: 1.7.2-2
Severity: important
both sudo and sudo-ldap fail when a user in ldap attempts to use sudo (for
example, sudo su). with the following message:
sudo: setreuid(ROOT_UID, user_uid): Operation not permitted
users in the traditional passwd database don't appear to be affected.
this system uses ldap with both nss and pam. all other aspects related to ldap
appear to be working (e.g. id, getent, etc.). i don't have a solution
to offer, as i was not able to successfully troubleshoot the problem, but am
happy to test ideas if it helps. i'll wait to
include various config files until requested.
-- System Information:
Debian Release: squeeze/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.30-1-686 (SMP w/2 CPU cores)
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/dash
Versions of packages sudo depends on:
ii libc6 2.9-25 GNU C Library: Shared libraries
ii libpam-modules 1.0.1-10 Pluggable Authentication Modules f
ii libpam0g 1.0.1-10 Pluggable Authentication Modules l
sudo recommends no packages.
sudo suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
If you want to use LDAP with sudo, then you should use the sudo-ldap variant.
Since you've filed the same bug against that package, I'm going to close this
one with no further action taken and we'll concentrate energy on that one.
Bdale
--- End Message ---